Load and unload device driversID: oval:gov.nist.usgcb.windowsseven:def:35 | Date: (C)2012-04-13 (M)2023-07-14 |
Class: COMPLIANCE | Family: windows |
This user right determines which users can dynamically load and unload device drivers or other code in to kernel mode. This user right does not apply to Plug and Play device drivers. It is recommended that you do not assign this privilege to other users.
Caution
Assigning this user right can be a security risk. Do not assign this user right to any user, group, or process that you do not want to take over the system.
Default on workstations and servers: Administrators.
Default on domain controllers:
Administrators
Print Operators
Fix:
(1) GPO: Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Load and unload device drivers
(2) REG: INFO NOT AVAILABLE
Platform: |
Microsoft Windows 7 |